[geeklog-cvs] geeklog-1.3/public_html/admin story.php,1.88,1.89

[geeklog-cvs-admin at lists.geeklog.net]

Update of /usr/cvs/geeklog/geeklog-1.3/public_html/admin
In directory internal.geeklog.net:/tmp/cvs-serv1398

Modified Files:
	story.php 
Log Message:
The last (attempted) fix actually made things worse - this should do it now ...


Index: story.php
===================================================================
RCS file: /usr/cvs/geeklog/geeklog-1.3/public_html/admin/story.php,v
retrieving revision 1.88
retrieving revision 1.89
diff -C2 -d -r1.88 -r1.89
*** story.php	21 Apr 2003 09:52:58 -0000	1.88
--- story.php	9 May 2003 10:27:45 -0000	1.89
***************
*** 122,125 ****
--- 122,126 ----
          $A['perm_anon'] = $T['perm_anon'];
          $access = 3;
+         $A['title'] = htmlspecialchars ($A['title']);
      } elseif ($mode == "edit") {
          $A['sid'] = COM_makesid();
***************
*** 155,159 ****
          // Convert array values to numeric permission values
          list($A['perm_owner'],$A['perm_group'],$A['perm_members'],$A['perm_anon']) = SEC_getPermissionValues($A['perm_owner'],$A['perm_group'],$A['perm_members'],$A['perm_anon']);
- 
          if ($A["postmode"] == "html") {
              $A["introtext"] = COM_checkHTML(COM_checkWords($A["introtext"]));
--- 156,159 ----
***************
*** 291,296 ****
      $A['title'] = str_replace('{','{',$A['title']);
      $A['title'] = str_replace('}','}',$A['title']);
!     $story_templates->set_var('story_title',
!                               htmlspecialchars (stripslashes ($A['title'])));
      $story_templates->set_var('lang_topic', $LANG24[14]);
      if (empty ($A['tid'])) {
--- 291,295 ----
      $A['title'] = str_replace('{','{',$A['title']);
      $A['title'] = str_replace('}','}',$A['title']);
!     $story_templates->set_var('story_title', stripslashes ($A['title']));
      $story_templates->set_var('lang_topic', $LANG24[14]);
      if (empty ($A['tid'])) {